You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

********
9:09 AM: | Start of Session, Sunday, November 13, 2005 |
9:09 AM: Spy Sweeper started
9:09 AM: Sweep initiated using definitions version 572
9:09 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:09 AM: The Spy Communication shield has blocked access to: www.ad-w-a-r-e.com
9:09 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:09 AM: The Spy Communication shield has blocked access to: www.a-d-w-a-r-e.com
9:09 AM: Starting Memory Sweep
[REMOVED THE BLOCK OF URL ABOVE]
9:10 AM: Found Adware: icannnews
9:10 AM: Detected running threat: C:\WINDOWS\system32\jtpo0773e.dll (ID = 83)
[REMOVED THE BLOCK OF URL ABOVE]
9:11 AM: Detected running threat: C:\WINDOWS\system32\dhscript.dll (ID = 83)
9:11 AM: Memory Sweep Complete, Elapsed Time: 00:02:17
9:11 AM: Starting Registry Sweep
9:11 AM: Found Adware: look2me
9:11 AM: HKLM\software\microsoft\windows nt\currentversion\winlogon\notify\h323tsp\ (6 subtraces) (ID = 129939)
[REMOVED THE BLOCK OF URL ABOVE]
9:11 AM: Registry Sweep Complete, Elapsed Time:00:00:11
9:11 AM: Starting Cookie Sweep
9:11 AM: Found Spy Cookie: atwola cookie
9:11 AM: root@atwola[1].txt (ID = 2255)
9:11 AM: Cookie Sweep Complete, Elapsed Time: 00:00:00
9:11 AM: Starting File Sweep
9:11 AM: Warning: Failed to open file "c:\pagefile.sys". Access is denied
[REMOVED THE BLOCK OF URL ABOVE]
9:13 AM: Warning: Failed to open file "c:\documents and settings\networkservice.nt authority\ntuser.dat". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\networkservice.nt authority\ntuser.dat.log". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\networkservice.nt authority\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\networkservice.nt authority\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\ntuser.dat". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\ntuser.dat.log". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs443d60b6-9c56-4922-b735-9c10887dbf29.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsd3073bed-173b-4878-bda1-3da47bfc05cb.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs5149ad77-6031-40ef-aa82-9966adeeaa93.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs76d260cc-4f99-4d46-ac3d-a5d9c83ad140.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsfb885d55-9937-47f6-8d3c-e5aadfd8755a.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs6a302903-141a-4e6b-a283-213996b53d43.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs7bc34fc9-7775-4652-a6a7-7d586eafd2eb.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs1afdd701-efa2-448e-bc84-3412addc29d4.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs9a342d6f-2303-4efb-b28a-64094af41435.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs5568f01e-8cfe-4b98-a58f-31995bf025bd.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs72b979e8-d6a8-44bd-9739-abced95b1e28.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs3e72b1ab-26f7-4d7c-871c-ecb9be24a0b4.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsa233b35a-13a9-4d40-bacb-2955b98bf8ce.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs1382c383-aa8c-495c-a526-8ffe364bf995.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsafc778fa-30f3-471c-bfa9-54deea8ba567.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs80dbee1f-3ea5-4b26-ac9b-c038e02da645.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsf763c27a-da73-4012-8759-bdcdf2dd3eab.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsd210f9c9-22f5-4679-b109-6d95f6a90e24.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs41748136-6401-4217-9e1f-a784bf286192.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs7464c1e3-022a-4fc8-8ca8-baffb23d886b.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsa8496a1f-9109-4538-a4d7-896f33c81fd9.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs3a6b1e9c-4501-489f-96ae-35a9c3d49330.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsdcfef940-d7e5-456e-a2c5-9bb82c2084bf.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs7e9607bb-6381-4875-be43-8d5c3cfcab5c.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs4f79d265-d6e9-49d4-a913-cbc46a5fdd61.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs89eef3ed-d8ca-4c25-bd0e-9c6e01a2c69d.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsecbe0436-255b-403d-a83a-8b6cfb5f3f4b.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsbee71df1-03d1-4cf8-b8a8-f5a34a009429.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsfa33a4d4-3815-41e1-abfa-4f568dddfe13.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs819e3092-1d83-4e89-ae9c-cd8412f247a2.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsbcab9294-c029-4296-9b84-3904ac975079.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs1016e751-cf90-40fb-bb33-1eb05eca59a8.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscscf4db6c7-412a-4b57-97aa-3cb12b978441.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs7893199a-6fc2-4df9-9c3f-1aa0f02ddca8.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsaa792e6c-64e0-43d4-a952-3e0761438d34.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsf0bacef6-0e6d-4766-aa13-139bad22f02c.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs50452322-5947-44fc-943a-e13bae9d6880.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsa930c565-976b-4cbf-b5dd-210900bff138.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs43a95536-f7d8-4571-8c3c-fdf3b5b90a9a.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscse347ec12-22d6-4252-9b75-91947c082173.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs07fe3aac-3270-4108-b06a-3ac10a5802fd.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsc864096c-2fee-48e4-9ea2-ee8eb281d67b.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsb09611a6-f548-4997-91a8-7878c83d4b49.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsbebff57f-4ec0-4d91-9ebb-472697c71809.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs73b1a285-6e81-4e11-8245-44a2f968e459.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs8dc773ab-9b59-4360-b146-13ed6c7e434f.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs375c7d7d-269f-415e-a856-7d08faaf42d8.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs288f79ba-6518-4479-8eb7-959238255337.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsc39b551e-706f-4db8-9532-4c3ee9eb0e37.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs26a59c2f-a5b3-4823-86ba-17fb3550caa7.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsb4bea1e5-7c62-49b7-bd11-3578516120d9.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsc19f557f-e546-47a2-90ca-52229683c97c.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs59ad014e-3b5c-4796-9ade-1f08f6890e0c.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs6af5abd3-a42f-4547-80c1-a41bc2e3e7ef.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsecfec418-1ea4-4947-a559-6e27b5918ff8.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsb27d80fe-71bb-4e7f-b472-2f73af5f91f7.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsdda03805-38f1-41a2-9136-487878c60525.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs4f17e8ca-85cb-460f-80d0-71476b4abd2a.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs0e8493d4-b657-4286-a838-9063ec61cc35.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs8837085d-e317-4bdd-bd8e-c4043493d19b.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs66f3c730-6b8d-4f87-8c3a-5bbc7db4dfa5.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs50fb2eb3-ca23-47d2-858f-780d06446959.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs54f87c17-c030-44fb-a607-3d33fe52d8cd.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs0e349887-ae27-4819-a418-4eae1899c475.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs4d4c69a5-91d1-4cdc-b296-7eb551f0e1ae.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsf28c453c-7d3c-420d-8e94-bad0d7d7e1a9.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs21e0d54e-0f23-4cc8-8009-8c2fbd8eb456.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsf320067e-a139-4b9d-b9e0-1cef5fe8cc1c.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs7144be29-2e97-43c6-88ff-aaa1c166a6f2.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs8fbc32a7-0bbd-4d8c-a52e-447c3229a9f2.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsce314f93-a4ca-4bbf-8afd-2cca41eae462.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs9769c682-8a55-49c1-9c25-50ff1152623f.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsefda5654-dfa6-4f75-aeb9-1e1061948b12.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs626b281b-f201-4457-b67f-9b4d31fd23d1.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscse3c3f90c-9311-4548-9070-0779182c6805.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs03b43db1-2617-4340-aea1-eeed10371d68.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsa75b8067-4606-441a-82f2-1d68d28c6ce1.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs780cfa62-8d1a-44a9-9679-a2e2b373fd6a.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs72564e3a-24f8-4981-8b2a-45b3c14d9304.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscse2b43013-390b-4989-b355-606c286bebdb.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs2c14577d-ad25-42d4-9a2b-218b178dd43c.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs918b61e0-795c-450a-a7f2-ed8da38d406c.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsca4ed6a6-5d9e-4c2a-956e-271df01d5327.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs1c5f034d-3923-4f87-a342-a7a9aad2d7d8.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsaefab373-8c3e-46fa-a80a-fb2c08246a3b.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsf9de921c-8dc7-405f-94eb-d6c4b5977368.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsfb2dc15f-9918-4694-8fcf-1c922d28244c.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs088c3c16-5892-42a7-b2e2-cec079e79244.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs6c080b94-153b-4751-90f3-8500adce6e25.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs62384b25-4f24-4d41-8044-5aa32ad5579e.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscse48594a7-9103-4045-b497-3a41c8dcdf82.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsff092831-f76b-4dc6-a062-2a6db9e489ce.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs2e89bc91-715a-49af-bc1e-6d4d5bc0a09d.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs366c79e1-1a21-46f1-b2c2-d6dc79708213.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsd498b7a1-a721-49ee-9239-02f6911e7151.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs6ff9d958-123e-4d63-abc6-ac97dad30b33.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs49226cc5-ce41-4d8f-9f14-71ca1fb04089.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs3b4eb529-75f0-423d-b8c5-1a258f7ac239.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs10d1e51b-5256-4844-ae3f-042cfa79feb1.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs901a97ed-e068-4d3c-89b9-ffe8cd0a293e.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsb11e1689-b423-4298-8fb7-546b3fa1aa49.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscsefee0a08-8755-4df6-8650-cecb4cb0f332.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscse79316b2-650a-4e1f-9d32-f4674f34e860.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\localservice.nt authority\application data\webroot\spy sweeper\temp\sscs87305ed8-9a0a-4fbb-b101-ac653d7585cf.tmp". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\root.dangermouse\ntuser.dat". The process cannot access the file because it is being used by another process
9:13 AM: Warning: Failed to open file "c:\documents and settings\root.dangermouse\ntuser.dat.log". The process cannot access the file because it is being used by another process
[REMOVED THE BLOCK OF URL ABOVE]
9:14 AM: Warning: Failed to open file "c:\documents and settings\root.dangermouse\local settings\application data\microsoft\windows\usrclass.dat". The process cannot access the file because it is being used by another process
9:14 AM: Warning: Failed to open file "c:\documents and settings\root.dangermouse\local settings\application data\microsoft\windows\usrclass.dat.log". The process cannot access the file because it is being used by another process
[REMOVED THE BLOCK OF URL ABOVE]
9:14 AM: Warning: Failed to open file "c:\documents and settings\root.dangermouse\application data\mozilla\firefox\profiles\47gtw4vr.default\parent.lock". The process cannot access the file because it is being used by another process
[REMOVED THE BLOCK OF URL ABOVE]
9:14 AM: Warning: Failed to open file "c:\documents and settings\root.dangermouse\application data\thunderbird\profiles\yzm7a8p5.default\parent.lock". The process cannot access the file because it is being used by another process
9:14 AM: Found Adware: targetsaver
9:14 AM: ioiqa.exe (ID = 78284)
9:14 AM: ioiql.exe (ID = 78246)
9:14 AM: ioiqp.exe (ID = 78285)
9:14 AM: class-barrel (ID = 78229)
9:14 AM: ioiqc.dll (ID = 78253)
9:14 AM: vocabulary (ID = 78283)
[REMOVED THE BLOCK OF URL ABOVE]
9:15 AM: Found Adware: quicklink search toolbar
9:15 AM: c:\program files\quicklinks (1 subtraces) (ID = -2147468660)
9:15 AM: uninst.exe (ID = 73428)
9:15 AM: Found Adware: apropos
9:15 AM: wingenerics.dll (ID = 50187)
[REMOVED THE BLOCK OF URL ABOVE]
9:15 AM: Warning: Failed to open file "c:\windows\system32\jtpo0773e.dll". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\r0r6la9s1d.dll". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\dhscript.dll". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\system.log". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\software.log". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\default.log". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\security". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\sam". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\sam.log". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\security.log". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\system". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\software". The process cannot access the file because it is being used by another process
9:15 AM: Warning: Failed to open file "c:\windows\system32\config\default". The process cannot access the file because it is being used by another process
[REMOVED THE BLOCK OF URL ABOVE]
9:16 AM: Warning: Failed to open file "c:\windows\temp\jet9da7.tmp". The process cannot access the file because it is being used by another process
[REMOVED THE BLOCK OF URL ABOVE]
9:17 AM: File Sweep Complete, Elapsed Time: 00:05:50
9:17 AM: Full Sweep has completed. Elapsed time 00:08:23
9:17 AM: Traces Found: 20
[REMOVED THE BLOCK OF URL ABOVE]
9:27 AM: Removal process initiated
[REMOVED THE BLOCK OF URL ABOVE]
9:28 AM: Quarantining All Traces: icannnews
9:28 AM: icannnews is in use. It will be removed on reboot.
9:28 AM: C:\WINDOWS\system32\jtpo0773e.dll is in use. It will be removed on reboot.
9:28 AM: C:\WINDOWS\system32\dhscript.dll is in use. It will be removed on reboot.
9:28 AM: Quarantining All Traces: look2me
9:28 AM: Quarantining All Traces: apropos
9:28 AM: Quarantining All Traces: quicklink search toolbar
9:28 AM: Quarantining All Traces: targetsaver
9:28 AM: Quarantining All Traces: atwola cookie
9:28 AM: Preparing to restart your computer. Please wait...
9:28 AM: Removal process completed. Elapsed time 00:01:27
********
9:06 AM: | Start of Session, Sunday, November 13, 2005 |
9:06 AM: Spy Sweeper started
9:06 AM: Messenger service has been disabled.
[REMOVED THE BLOCK OF URL ABOVE]
9:07 AM: Your spyware definitions have been updated.
[REMOVED THE BLOCK OF URL ABOVE]
9:09 AM: | End of Session, Sunday, November 13, 2005 |

Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for Run Find Log by typing 1 and then pressing enter. This will scan your computer and it may appear nothing is happening, then, after a minute or 2, notepad will open with a log. Copy the contents of that log and paste it into this thread.

IMPORTANT: Do NOT run option #2 OR any other files in the l2mfix folder until you are asked to do so!

**********************************************************************************
HKEY ROOT CLASSIDS:
**********************************************************************************
Files Found are not all bad files:

On the Desktop, right-click My Computer.Click Properties.Click the System Restore tab.Check Turn off System Restore.Click Apply, and then click OK.

Restart your computer, turn System Restore back on and create a restore point.

To create a restore point:

Single-click Start and point to All Programs.Mouse over Accessories, then System Tools, and select System Restore.In the System Restore wizard, select the box next the text labeled "Create a restore point" and click the Next button.Type a description for your new restore point. Something like "After trojan/spyware cleanup". Click Create and you're done.